Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b020a199-36dd-429c-9e09-5074b1672ada.roa
File:                     b020a199-36dd-429c-9e09-5074b1672ada.roa (raw, json)
Hash identifier:          q1c4d+CcNEeAbnKGw8/pkh3JF8EFKhMmud1BNhy1gaE=
Subject key identifier:   B1:58:28:D7:42:51:C6:85:D4:C2:CA:AC:A2:89:20:B7:B1:48:DE:EA
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       32A042024B5A98B4612555B4EBBD217CB4663140
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b020a199-36dd-429c-9e09-5074b1672ada.roa
Signing time:             Sun 20 Nov 2022 00:00:00 +0000
ROA not before:           Sun 20 Nov 2022 00:00:00 +0000
ROA not after:            Wed 23 Nov 2022 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a0:42:02:4b:5a:98:b4:61:25:55:b4:eb:bd:21:7c:b4:66:31:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Nov 20 00:00:00 2022 GMT
            Not After : Nov 23 23:59:59 2022 GMT
        Subject: serialNumber=3b85d7fdee1fc1f2b52da15a450bf8e26dc6484afcdaa15c383bf5feb1bf5969, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1e:35:60:32:71:92:0d:6e:6d:dc:22:d9:bf:
                    c9:be:70:7a:32:2d:f6:f7:2b:61:da:6b:09:bf:79:
                    90:fc:95:59:f1:f6:89:ed:f3:8c:97:bc:d4:d8:c6:
                    16:05:ad:fc:cb:63:28:a9:72:29:25:e4:fc:3d:ba:
                    6e:0f:a0:41:5e:ae:f0:74:9e:23:5f:19:15:8d:1f:
                    b2:8d:58:0b:69:06:af:fb:92:38:ac:88:de:ed:49:
                    2d:2c:fa:09:2b:cc:81:4e:f1:97:0e:0e:69:27:88:
                    39:01:ed:4d:c2:c5:df:c2:be:46:7b:d4:78:87:27:
                    f3:c2:6a:ae:20:b6:2e:3c:03:6c:96:f7:b0:c1:c3:
                    5c:7c:43:9d:0f:22:e8:02:53:cc:84:8d:59:f3:de:
                    f6:e7:3a:73:4d:21:c9:f1:6f:a0:c1:7b:bf:2a:6a:
                    f5:35:d6:79:ba:8b:bd:8f:de:4f:8d:3e:c2:47:05:
                    7b:ea:89:ad:af:48:68:a8:f8:8a:b3:88:21:7c:79:
                    6c:69:bc:e4:f9:64:dc:de:87:79:63:7f:b6:54:d0:
                    92:41:4e:23:7a:46:9b:27:4c:b6:4b:60:24:cc:54:
                    cb:f8:9d:e1:2f:21:3c:9d:9c:ad:7e:e2:4f:f1:6c:
                    6f:dd:b3:15:af:b4:1c:46:41:f3:b3:87:be:72:c3:
                    32:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:28:D7:42:51:C6:85:D4:C2:CA:AC:A2:89:20:B7:B1:48:DE:EA
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/b020a199-36dd-429c-9e09-5074b1672ada.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:a5:ce:12:a8:8e:48:be:7a:93:13:97:32:26:fc:aa:ab:42:
         f1:82:bf:27:e8:3c:6d:5c:c5:e7:f9:1d:ca:8b:e5:76:b3:37:
         a5:3f:f7:36:f4:1d:d0:3f:2f:03:d1:a1:94:98:e6:55:c6:6a:
         e8:9b:76:7d:31:45:86:65:a5:1e:f6:ed:5f:bd:e4:16:02:e0:
         04:38:da:ab:58:5f:bd:42:d1:df:d7:0f:24:56:32:df:1c:04:
         35:cc:e0:db:b7:ef:08:0e:1f:64:b8:7f:90:95:b7:6e:73:c8:
         e0:56:a2:c2:68:fd:a2:0d:9d:75:1b:a5:b4:57:55:95:33:05:
         f6:f9:50:39:05:10:60:04:59:86:59:b7:53:9d:ea:f1:13:bc:
         42:1a:04:d7:3a:67:d8:57:6c:e1:60:8e:c2:5a:14:91:67:0c:
         d0:7b:7c:dc:cb:ed:65:33:4c:34:8d:21:bf:1a:8c:89:50:ec:
         c9:f2:93:84:4d:09:a4:17:82:74:e5:ef:4e:f5:be:33:bd:a6:
         67:f2:44:b0:49:44:a2:27:92:f7:aa:d7:09:63:2a:8e:d6:25:
         ac:46:d6:8f:76:3b:e3:38:c4:52:f9:e1:7f:6b:cd:e8:6c:b5:
         43:0c:a0:02:83:45:29:7e:f4:98:9a:f1:1f:b8:b6:bf:11:dd:
         5f:ff:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----